乌克兰电力系统BlackEnergy病毒分析与防御  

Analysis and defense of the BlackE nergy malware in the Ukrainian electric power system

作　　者：王勇 王钰茗[1] 张琳[1] 张林鹏[1] WANG Yong WANG Yu-ming ZHANG Lin ZHANG Lin-peng(School of Computer Science and Technology, Shanghai University of Electric Power, Shanghai 200090, Chin)

机构地区：[1]上海电力学院计算机科学与技术学院,上海200090

出　　处：《网络与信息安全学报》2017年第1期46-53,共8页Chinese Journal of Network and Information Security

基　　金：上海科委地方能力建设基金资助项目(No.15110500700);上海市浦江人才计划基金资助项目(No.16PJ1433100);上海自然科学基金资助项目(No.16ZR1436300);上海科委中小企业创新基金资助项目(No.1601H1E2600)~~

摘　　要：2015年12月,乌克兰电力系统遭到BlackEnergy病毒攻击,导致伊万诺—弗兰科夫斯克州地区发生多处同时停电的事故,该病毒也威胁到我国电力系统安全。通过获取不同版本的BlackEnergy病毒样本,构建了分析环境,发现了BlackEnergy攻击方式,并给出了防御方法。Ukrainian electric power system suffered BlackEnergy virus attacks in December 2015, resulting in blackout accident occurred simultaneously at multiple areas in Ivano-Frankovsk region, the malware also pose a threat to the electric power system security in China. Based on different versions of samples of BlackEnergy acquired, the attack mode was analyzed and the prevention of the virus was provided under the proper analysis environment.

关 键 词：BlackEnergy病毒 病毒分析 入侵防御 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]